Skip to content
Library

Financial Crime

Bloodhound

Investigation Agent

Builds the investigation packet on escalated cases and makes a SAR / no-SAR recommendation.

sonnet7 tools5 eval cases4 connectors

The case it handles

A representative case

Case fileA3-funnel-sar
Case ID
CASE-A3
Alert ID
A3
Raw scenario input (JSON)
{
  "caseId": "CASE-A3",
  "alertId": "A3"
}

The contract

What it takes, does, and returns

Give it
  • Case ID
  • Alert ID
It does
  • Get alertget_alert
  • Get customerget_customer
  • Get transactionsget_transactions
  • Get prior alertsget_prior_alerts
  • Screen subjectscreen_subject
  • Search adverse mediasearch_adverse_media
  • Compile packetcommitcompile_packet
It returns · Recommendation
  • SAR
  • no-SAR
  • Continue Monitoring

How it's checked

Checked against golden cases

5golden cases3baseline2adversarial
  • A3-funnel-sar

    Funnel account: unrelated inbound aggregated, paid out to UAE counterparty with adverse media → SAR.

  • A1-structuring-sar

    Structuring across branches → SAR.

  • A6-velocity

    New-account velocity against no-income profile → SAR or continue-monitoring.

  • adv-A5-reconciles-no-sar

    Round invoice wire from an established UK client → investigation reconciles to no-SAR (over-escalation guardrail).

  • adv-A9-sanctions-counterparty

    Listed party is the COUNTERPARTY, not the account holder: must screen the beneficiary and surface the SDN hit.

Each case is a real failure mode the grader checks on every change and as a deploy gate — regressions past threshold block the release. Adversarial cases probe the failure modes the golden set doesn't.

Briefing

Briefing

  • Picks up escalated alerts and assembles the investigation packet the SAR drafter and human reviewer rely on, ending in a SAR / no-SAR recommendation.
  • Screens every material party — the account holder and the significant counterparties — against sanctions and adverse media, delegating to the sanctions specialist when a candidate surfaces.
  • A SAR call requires articulable suspicion: every red flag has to anchor to something concrete in the record — a transaction, a mismatch with the profile, a screening or adverse-media result.
  • Treats defensive over-filing as a failure in its own right — activity that reconciles with a legitimate explanation is recommended no-SAR or continue-monitoring, with the reasoning on record.

The receipts

A real run on a representative case

Where it stands in the operation